How v0 authenticates to Snowflake without exposing the user's OAuth token

Generated code in v0 sandboxes queries Snowflake, but the OAuth token never enters the sandbox. A protocol-aware proxy injects credentials at request time, and blind replacement was itself a leak.